Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Setting Certificate Download Server Parameters
Setting Certificate Download Server Parameters
You can set the parameters of the certificate download server on the web interface of the endpoint. After the parameters are set, the endpoint can download and import CA certificates and server certificates in batches.
Context
Server parameters can be downloaded for endpoints through eSight.
An endpoint supports a maximum of 20 CA certificates and 20 server certificates. If an endpoint already has 20 CA certificates or server certificates, no certificate is downloaded.
If the downloaded CA certificate is the same as the local CA certificate, the CA certificate will not be imported again.
If the downloaded server certificate and private key are the same as those on the local server, they will not be imported again. If the associated service parameters change, re-associate the service.
Procedure
Choose System Settings > Registration and click the Certificate download server tab.
Set the certificate download server parameters, as described in Table 1-29.
Table 1-29 Parameter description
Parameter
Description
Setting
Automatic download
Specifies whether the endpoint automatically downloads certificates from the certificate server. If this function is disabled, the endpoint will not automatically download certificates.
The default value is Enable.
If Automatic download is set to Enable, certificates will be automatically downloaded and imported when the server address or port number is changed or whether
to associate with HTTPS, SIP, 802.1x, or TR-069 during certificate import is modified.
Server address
Specifies the IP address or domain name of the certificate download server.
No default value is set for this parameter.
Port
Set the port number of the certificate download server.
The default value is 8444.
HTTPS
Specifies whether to associate the server certificate downloaded by the endpoint with the HTTPS service when the certificate is imported.
The default value is Enable.
SIP
Specifies whether to associate the server certificate downloaded by the endpoint with the SIP service when the certificate is imported.
The default value is Enable.
802.1X
Specifies whether to associate the server certificate downloaded by the endpoint with the 802.1x service when the certificate is imported.
The default value is Enable.
TR069
Specifies whether to associate the server certificate downloaded by the endpoint with the TR-069 service when the certificate is imported.